aboutcode-org/scancode.io

View on GitHub

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

Stars: 215
Forks: 203
Open beginner issues: 0
Indexed issues: 416
Avg merge: 4d 8h
Merged PRs (30d): 6

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 11, 2026
Latest indexed: Sep 13, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted

Open All

416 open issues indexed

Ignoring paths by patterns does not remove them from package assembly Open

bug

aboutcode-org/scancode.io#1607 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Cannot use ScanCode.io fully as a library Open

aboutcode-org/scancode.io#1608 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Implementing better pagination Open

aboutcode-org/scancode.io#1614 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Support Bluefin container images Open

aboutcode-org/scancode.io#1615 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Missing "for_packages" value for some package resources from Docker image scan Open

aboutcode-org/scancode.io#1617 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Bug: CycloneDX 1.6 SBOM being generated without dependency details Open

bug high priority

aboutcode-org/scancode.io#1618 · 1 comment · 0 reactions · 2 assignees · Indexed Sep 13, 2026
cannot scan rustc software - keeps timing out - after 24 hours Open

bug

aboutcode-org/scancode.io#1623 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add option to flatten layers in container scan Open

aboutcode-org/scancode.io#1633 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Cannot run as unprivileged user without creating /etc/scancodeio as root Open

bug

aboutcode-org/scancode.io#1641 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Exception when running `populate_purldb` on project where previous run was `load_sbom` Open

bug

aboutcode-org/scancode.io#1644 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Update matchcode pipeline description Open

aboutcode-org/scancode.io#1660 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Enable the selection of multiple add-on pipelines at once Open

aboutcode-org/scancode.io#1661 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Scan OSADL base container images Open

aboutcode-org/scancode.io#1667 · 7 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Document tutorial and create convenience script for CLI scan of containers Open

aboutcode-org/scancode.io#1668 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Failure to fetch a helm chart with a docker://URL and analyze_docker_image Open

aboutcode-org/scancode.io#1675 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Detect properly multiple Java classes bundled in a single Java file Open

bug low priority

aboutcode-org/scancode.io#1677 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add support to store scanned-packages/archives locally Open

GSoC

aboutcode-org/scancode.io#1683 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Upgrade Skopeo binary (currently embedded in fetchcode-container) Open

aboutcode-org/scancode.io#1696 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improve back2source for Ruby for corner cases Open

aboutcode-org/scancode.io#1711 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Weird message when trying to rerun map_deploy_to_devel pipeline Open

bug low priority nice-to-have

aboutcode-org/scancode.io#1712 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improve design for new "unique license detections" "panel" Open

aboutcode-org/scancode.io#1752 · 1 comment · 1 reaction · 1 assignee · Indexed Sep 13, 2026
cravex2-reachability: Package and prepare CRAVEX 2 for release and adoption Open

aboutcode-org/scancode.io#1758 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
cravex2-reachability: Create integration layer for other reachability tools Open

aboutcode-org/scancode.io#1759 · 0 comments · 0 reactions · 2 assignees · Indexed Sep 13, 2026
cravex2-reachability: Implement integration with atom and chen reachability tool Open

aboutcode-org/scancode.io#1760 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
maven-heaven: Implement Maven Heaven solution Open

aboutcode-org/scancode.io#1762 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
maven-heaven: Automatically find and report Maven issues for licenses and origin Open

aboutcode-org/scancode.io#1764 · 9 comments · 0 reactions · 3 assignees · Indexed Sep 13, 2026
maven-heaven: Improve solution, document, package and publish Open

aboutcode-org/scancode.io#1765 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
t-rust: Implement T-Rust solution Open

aboutcode-org/scancode.io#1766 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
t-rust: Design and implement Scancode.io pipeline for a single Rust package Open

aboutcode-org/scancode.io#1767 · 5 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
t-rust: Automatically find and report crates.io issues for licenses and origin Open

aboutcode-org/scancode.io#1768 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
t-rust: Improve solution, document, package and publish Open

aboutcode-org/scancode.io#1769 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Do not inlcude symbols in general project outputs Open

back2source

aboutcode-org/scancode.io#1781 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Support uploading the binary directly as an input Open

back2source

aboutcode-org/scancode.io#1782 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
package scan on the source/binary side for package manifests Open

back2source

aboutcode-org/scancode.io#1783 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Filter resources based on source/binary symbols detected Open

back2source

aboutcode-org/scancode.io#1784 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
archive names starting with `to` or `from` is problematic because of convention Open

back2source

aboutcode-org/scancode.io#1785 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
show full filename for source/binary archives in resources Open

aboutcode-org/scancode.io#1786 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Download source for bundled dependency binaries for matching Open

back2source

aboutcode-org/scancode.io#1787 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Apply file categorization to identify files which does not require review Open

back2source

aboutcode-org/scancode.io#1788 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Projects page UI/UX can be improved Open

web-ui

aboutcode-org/scancode.io#1789 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Automatically select d2d options Open

back2source

aboutcode-org/scancode.io#1790 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Ignore specific paths/fles in `.nupkg` archives Open

back2source

aboutcode-org/scancode.io#1791 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Dependency tree view shows "circular dependency" error Open

aboutcode-org/scancode.io#1801 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
"value too long for type character varying(1024)" error in "scan_single_package" pipeline Open

bug

aboutcode-org/scancode.io#1833 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Incorrect purl's version return for sentry-25.7.0 Open

aboutcode-org/scancode.io#1834 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Missing purl version for go packages Open

aboutcode-org/scancode.io#1835 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Feeature request: OKD - OpenShift compatible Helm or YAML deployment Open

aboutcode-org/scancode.io#1838 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Can't get the project to work Open

bug documentation

aboutcode-org/scancode.io#1842 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Flagging Autogenerated Files in "map_deploy_to_develop" Pipeline - Pypi Open

aboutcode-org/scancode.io#1845 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Reducing Noise in "map_deploy_to_develop" pipeline - Pypi Open

aboutcode-org/scancode.io#1846 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

aboutcode-org/scancode.io

Get new issues in your inbox